Information Assurance Analyst

RAZOR; Rockville (MD); Remote; USD 52,348 - 57,859; Part time

Job summary

A technology service provider is looking for an Information Assurance Analyst/Engineer for a long-term federal government contract in Rockville, Maryland. This mid-senior level position offers a remote work option and requires expertise in risk assessments and vulnerability scanning. The ideal candidate has experience with security tools such as Nessus and Nmap, and familiarity with NIST Risk Management policies. Candidates must comply with Public Trust Clearance requirements.

Qualifications

• 1+ years of experience performing Information Assurance (IA) controls analysis, testing, and risk assessments.
• Working knowledge of eMASS (Enterprise Mission Assurance Support Service).
• Knowledge of NIST SP 800‑53 and 800‑37, and other VA Risk Management policies.

Responsibilities

• Track efforts and perform tasks related to A&A to ensure information systems obtain Authorization to Operate (ATO).
• Plan, coordinate, and lead teams to conduct assessments of information systems and networks.
• Support VASCARs and other VA cybersecurity leadership in the execution of Cyber Security and RMF processes.

Skills

Information Assurance controls analysis

Nessus

Nmap

Burpsuite

Linux security (RHEL7)

AWS cloud security

Vulnerability scanning and assessment

Risk Management Framework (RMF)

eMASS

Job description

Get AI-powered advice on this job and more exclusive features.

This range is provided by RAZOR. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$38.00/hr - $42.00/hr

Information Assurance Analyst / Engineer

Razor is looking for an Information Assurance Analyst or Engineer to join a long‑term federal government contract supporting a large federal government agency.

Start date: 1/20/2026. The role is 100% remote and will require you to go through a Public Trust Clearance and fingerprinting process. The role requires specific work authorizations; inquire within.

The Challenge

This individual's primary responsibility will be to track efforts and perform tasks related to A&A to ensure assigned information systems, devices, and networks can obtain and maintain Authorization to Operate (ATO) and other decisions. They will plan, coordinate, and lead teams to conduct assessments of information systems and networks to identify vulnerabilities, risks, and security requirements in accordance with the A&A process. Secondary responsibilities include testing CCIs, validating Security Plans, weekly status updates, and extensive work in eMASS packages. They will support VASCARs, the VA Security Control Assessor (SCA), and other VA cybersecurity leadership in the execution and enforcement of VA Cyber Security and RMF process.

Qualifications

• 1+ years of experience performing Information Assurance (IA) controls analysis, testing, and risk assessments
• 1+ years of experience with Nessus, Nmap, Burpsuite, Linux security (RHEL7), AWS cloud security
• Working knowledge of eMASS (Enterprise Mission Assurance Support Service)
• Knowledge of NIST SP 800‑53 and 800‑37, CNSSI 1254, and other VA Risk Management policies
• Ability to identify and evaluate major applications, infrastructure, enclaves, and Enterprise environments based on accreditation boundaries
• Knowledge of defense‑in‑depth and other information security and assurance principles and associated supporting technologies
• Familiarity with the use of vulnerability scanning and assessment tools necessary to identify and document compliance
• Capable of providing thoughtful feedback to the ISO, ISSO and other VA Cyber Security leadership to identify risks, communicate recommended courses of action, and recommend process improvements

Nice to Have

• Experience with VA Cyber Security
• Ability to work as an independent security practitioner and participate in a small team of security personnel reviewing the same system
• Ability to communicate effectively both verbally and in writing
• Ability to organize, analyze, and write technical documents that can be understood by non‑technical individuals
• Experience with Prisma Cloud/Twistlock and containerization

Seniority Level

Mid‑Senior level

Employment Type

Contract

Job Function

Information Technology

Industries

Software Development, Information Services, and IT Services and IT Consulting

Referrals increase your chances of interviewing at RAZOR by 2x